KiServiceTable (WinDbg) howto.
kd> dt nt!*descriptortable* -v
Enumerating symbols matching nt!*descriptortable*
Address Size Symbol
80559640 000 nt!KeServiceDescriptorTableShadow (no type info)
80559680 000 nt!KeServiceDescriptorTable (no type info)
kd> dds nt!KeServiceDescriptorTable L4
80559680 804e26a8 nt!KiServiceTable
80559684 00000000
80559688 0000011c
8055968c 80512eb8 nt!KiArgumentTable
kd> dds nt!KeServiceDescriptorTableShadow L8
80559640 804e26a8 nt!KiServiceTable
80559644 00000000
80559648 0000011c
8055964c 80512eb8 nt!KiArgumentTable
80559650 bf999280 win32k!W32pServiceTable
80559654 00000000
80559658 0000029b
8055965c bf999f90 win32k!W32pArgumentTable
kd> dds nt!KiServiceTable L120